From eab6204a1afbf074cf383d1c1b44b33053dfbc86 Mon Sep 17 00:00:00 2001
From: ale <ale@incal.net>
Date: Thu, 13 Jul 2017 11:13:22 +0000
Subject: [PATCH] Do not remove files from the spool on flush errors

---
 cmd/localauditd/localauditd.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/cmd/localauditd/localauditd.go b/cmd/localauditd/localauditd.go
index 607be9f..2a4ae67 100644
--- a/cmd/localauditd/localauditd.go
+++ b/cmd/localauditd/localauditd.go
@@ -231,6 +231,7 @@ func (s *Spool) Flush(fn func([]byte) error) error {
 					log.Printf("aborting scan: too many errors")
 					return errors.New("too many errors")
 				}
+				continue
 			}
 			os.Remove(filepath)
 		}
-- 
GitLab